Bump hraness-cli-kit from v1.1.2 to v2.0.0

[dependabot]

Bumps hraness-cli-kit from v1.1.2 to v2.0.0.

Release notes

Sourced from hraness-cli-kit's releases.

desktop-foundation v2.0.0

All on-screen UI is gone. There is no terminal UI, no native notice or prompt dialog, and no dialog capability probe. Products present everything in the terminal they already own (status --json for scripts, prePrompt and renderRecovery for people), and hraness-helper exists only to assemble, sign and launch the macOS local app. The headless control kit — registry, owner sockets, human gate, audience, permissions, login items and retirement — is unchanged. Every product pins an exact release, so nothing changes until a product bumps.

Changes

• Removed the ./tui SDK subpath and the hraness-control-kit tui feature, with their ratatui, crossterm and ratatui-textarea dependencies. runTui and renderSnapshot are gone; <product> status --json is the view for scripts and the basis for any product's own terminal listing.
• Removed the native dialog helper modes. --notice, --prompt and --prompt-probe now answer invalid-arguments (exit 1) like any unknown argv, and contract/helper-argv.v0.8.1.json pins exactly that. This drops the GTK 3 dependency on Linux, the AppKit dialogs on macOS and the Win32 dialog on Windows, and with them the objc2, windows and zeroize dependency trees.
• Removed the SDK dialog surface: sdk/src/notice.ts, sdk/src/prompt.ts and sdk/src/tui.ts are deleted, including promptNative, promptTui, promptCapability, promptSecret, permissionNoticeRequest, NoticeRequest, NoticeResult, PermissionNoticeRequest and the injectable notice hook on the permission renderer.
• Surface / Surface::Dialog is gone. renderPrePrompt and renderRecovery are terminal-only: renderPrePrompt(need, env) and renderRecovery(need, state, env) in TypeScript, and the same signatures without a surface argument in Rust.
• Removed scripts/prompt-smoke.mjs and the dialog-capability check in CI, plus the orphaned tui-status goldens under sdk/test/golden/ and crates/hraness-control-kit/tests/golden/.
• Unchanged: hraness-helper keeps --version, --assemble-app, --signing-identity and --launch, so the macOS local app and Ghostget's Safe Storage cookie reader keep working. hraness-companion remains an alias that prints byte-identical output for the retained modes and still refuses the 0.x menu bar argv with exit 2 and tray-removed; the stderr line now points to <product> status --json. packagedManifest, resolveHelper and every other SDK subpath (./audience, ./cli-style, ./control, ./helper, ./human-gate, ./login, ./permissions, ./registry, ./retire) keep their APIs. Terminal permission copy, settings links, permission probes, JSON error envelopes and the shared golden files are unchanged; the golden files now cover terminal output only.

Install

... (truncated)

Changelog

Sourced from hraness-cli-kit's changelog.

2.0.0 - 2026-10-05

All on-screen UI is gone. There is no terminal UI, no native notice or prompt dialog, and no dialog capability probe. Products present everything in the terminal they already own (status --json for scripts, prePrompt and renderRecovery for people), and hraness-helper exists only to assemble, sign and launch the macOS local app. The headless control kit — registry, owner sockets, human gate, audience, permissions, login items and retirement — is unchanged. Every product pins an exact release, so nothing changes until a product bumps.

Changes

• Removed the ./tui SDK subpath and the hraness-control-kit tui feature, with their ratatui, crossterm and ratatui-textarea dependencies. runTui and renderSnapshot are gone; <product> status --json is the view for scripts and the basis for any product's own terminal listing.
• Removed the native dialog helper modes. --notice, --prompt and --prompt-probe now answer invalid-arguments (exit 1) like any unknown argv, and contract/helper-argv.v0.8.1.json pins exactly that. This drops the GTK 3 dependency on Linux, the AppKit dialogs on macOS and the Win32 dialog on Windows, and with them the objc2, windows and zeroize dependency trees.
• Removed the SDK dialog surface: sdk/src/notice.ts, sdk/src/prompt.ts and sdk/src/tui.ts are deleted, including promptNative, promptTui, promptCapability, promptSecret, permissionNoticeRequest, NoticeRequest, NoticeResult, PermissionNoticeRequest and the injectable notice hook on the permission renderer.
• Surface / Surface::Dialog is gone. renderPrePrompt and renderRecovery are terminal-only: renderPrePrompt(need, env) and renderRecovery(need, state, env) in TypeScript, and the same signatures without a surface argument in Rust.
• Removed scripts/prompt-smoke.mjs and the dialog-capability check in CI, plus the orphaned tui-status goldens under sdk/test/golden/ and crates/hraness-control-kit/tests/golden/.
• Unchanged: hraness-helper keeps --version, --assemble-app, --signing-identity and --launch, so the macOS local app and Ghostget's Safe Storage cookie reader keep working. hraness-companion remains an alias that prints byte-identical output for the retained modes and still refuses the 0.x menu bar argv with exit 2 and tray-removed; the stderr line now points to <product> status --json. packagedManifest, resolveHelper and every other SDK subpath (./audience, ./cli-style, ./control, ./helper, ./human-gate, ./login, ./permissions, ./registry, ./retire) keep their APIs. Terminal permission copy, settings links, permission probes, JSON error envelopes and the shared golden files are unchanged; the golden files now cover terminal output only.

Commits

• 798be31 Remove TUI views and native dialogs; release as 2.0.0 (#56)
• 93ac18a Add an SDK import check and task navigation to the README (#55)
• 884e220 Run the shared dependency audit (#53)
• 1518252 Tag releases automatically when a version bump passes CI (#52)
• 057658d Refresh public guides and clarify local signing copy (#51)
• 8627c08 Fix publisher signing keychain lookup and literal requirements (#50)
• 4bc50df Preserve exact release artifacts across job retries (#49)
• 3ba3bb1 chore(deps): bump actions/setup-node from 4 to 7 (#38)
• bec021a Prepare stable Developer ID signing for Mac release binaries (#48)
• 4056fd1 docs: register portable browser automation policy
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
xcb	Ignored	Preview	Oct 14, 2026 7:16pm UTC